WordPress with a Web Application Firewall (WAF) is super secure. I use the free version of Ninja Firewall. Https://wordpress.org/plugins/ninjafirewall/. Source: about 1 year ago

We provide a competing plugin, but in our testing, the best free firewall option has been NinjaFirewall. It has been shown to provide more protection than Wordfence Security without creating the same performance penalty. Source: over 1 year ago

While what you are saying is partially true with Wordfence, it isn't true for WordPress firewall plugins that are well developed. With both NinjaFirewalland our Plugin Vulnerabilities Firewall provide protection that Cloudflare can't provide, as they hook into WordPress and take actions based on information that Cloudflare and other security systems that don't hook in to it, don't have access to. Source: about 2 years ago

If someone wants a firewall plugin, then our testing has shown that the best free option is NinjaFirewall and our Plugin Vulnerabilities Firewall is the best overall. Source: about 2 years ago

Wordfence Security actually does provide some protection against those types of vulnerabilities. The problem is that, as our testing has shown, it provides much less than the NinjaFirewall plguin and our Plugin Vulnerabilities Firewall plugin. That might have to do with them selling access to firewall rules, as providing better general protection would reduce the need for firewall rules, but it would provide much... Source: about 2 years ago

I hate Ultimate membership, and all plugins except maybe this one: https://wpusermanager.com/ but this one - expensive. With Ultimate Membership Plugin I have long story, long and awful story full of bugs, of resource draining, and refusing to fix bugs with indexes that provoke infinite sql loops. Source: over 1 year ago